Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS61102.roa
File: AS61102.roa (raw, json)
Hash identifier: meL0AIVwATPr0HtLecPtYe2ZmJOFRAnH0+/cqSkIezg=
Subject key identifier: E5:5C:6F:EF:08:9B:1B:30:90:EC:87:6F:4C:9C:CD:20:94:0D:A2:8E
Certificate issuer: /CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Certificate serial: 58B8D2D72CDA87851E45CC05FB3D1C8A201E9A41
Authority key identifier: 4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS61102.roa
Signing time: Sun 04 May 2025 14:26:31 +0000
ROA not before: Sun 04 May 2025 14:21:31 +0000
ROA not after: Sun 03 May 2026 14:26:31 +0000
asID: 61102
IP address blocks: 155.117.219.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.mft
rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 08 May 2025 13:31:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
58:b8:d2:d7:2c:da:87:85:1e:45:cc:05:fb:3d:1c:8a:20:1e:9a:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Validity
Not Before: May 4 14:21:31 2025 GMT
Not After : May 3 14:26:31 2026 GMT
Subject: CN=E55C6FEF089B1B3090EC876F4C9CCD20940DA28E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:ed:1a:6d:97:63:be:fe:36:be:fe:8f:02:08:
28:1f:54:0d:f6:b6:6b:58:74:d1:ae:f8:3f:2f:69:
27:5e:7c:23:6f:cc:40:3b:60:3f:18:fa:45:55:33:
88:02:90:70:b1:e9:f6:69:4d:e5:11:20:aa:ae:4c:
e4:33:16:63:12:71:02:7a:73:0b:8b:8f:97:e2:cf:
34:be:6b:f0:9a:ea:72:fc:be:b7:ac:c5:44:32:62:
63:68:57:96:62:2a:2c:64:79:4a:7d:9c:0e:a8:c0:
7c:e8:0c:86:5a:f7:f7:5d:18:32:25:d4:98:87:12:
25:51:75:97:e9:43:73:cb:32:46:71:fa:2e:75:6e:
94:95:96:2b:5d:ef:88:87:b8:76:59:66:2a:ec:2e:
2a:61:6c:29:97:45:57:1c:9a:65:e7:ff:e1:c2:bb:
97:be:5a:5f:bb:03:59:c2:ac:29:43:08:5e:44:2b:
ee:14:64:c3:de:01:48:1c:83:94:fa:70:30:c0:44:
c6:e1:5b:52:3c:f2:24:9b:44:27:c1:8f:2f:67:9d:
a0:1a:f2:eb:08:af:b0:9c:cd:e6:62:c6:2e:19:a2:
8c:f9:a5:81:fe:8d:9a:5f:d3:6d:95:a5:09:86:c3:
d2:9e:1b:12:5e:e2:39:6d:89:0d:fc:2c:ee:53:5b:
5e:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:5C:6F:EF:08:9B:1B:30:90:EC:87:6F:4C:9C:CD:20:94:0D:A2:8E
X509v3 Authority Key Identifier:
keyid:4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS61102.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
155.117.219.0/24
Signature Algorithm: sha256WithRSAEncryption
7c:e8:4a:16:8f:5a:45:46:4b:a9:d5:b2:59:0d:40:57:52:1f:
ab:47:01:82:a1:2c:ed:a0:af:46:2b:65:67:77:c8:e8:e0:1d:
1c:f8:5f:21:4c:06:ae:98:2f:fa:03:d7:4d:60:41:91:b4:b3:
fa:a4:fc:09:4f:3e:20:37:ce:bb:b2:3d:ef:e7:82:30:c5:75:
e4:d6:33:c8:f6:85:ec:18:2d:61:dd:28:2f:c4:04:80:c1:dd:
1d:b7:01:d3:ea:3c:f3:ec:6e:09:bd:6e:82:be:2a:44:0c:1d:
4a:06:cd:f1:42:95:2e:14:c9:f1:98:7e:77:93:66:de:ea:7f:
d6:3c:9c:00:b2:bf:23:ad:c2:1b:4c:96:95:cf:8d:94:64:e8:
5d:3a:26:e1:6a:07:c0:bf:f2:72:81:e5:23:f3:cf:94:e2:ed:
aa:8b:a9:33:e6:b4:10:cd:b4:43:90:1b:ef:24:58:bc:da:8e:
10:99:d4:d7:50:96:e1:aa:99:96:93:4d:47:a4:9e:d6:d1:da:
42:3b:a7:87:f3:b6:87:a2:fb:a3:48:49:4c:2c:03:4c:07:88:
53:7c:f8:a1:1c:31:ef:22:4d:5a:02:24:61:3e:bb:58:16:6f:
a2:63:52:33:0e:ed:51:a6:ae:62:b6:a5:56:16:59:42:08:00:
03:fc:25:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 7 15:08:35 2025 by rpki-client